Lucene search
+L

1212 matches found

OSV
OSV
added 2026/08/03 1:16 a.m.7 views

UBUNTU-CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/03 12:38 a.m.109 views

CVE-2026-12185

In Bouncy Castle for Java before 1.85, the BKS/UBER keystore allocates from untrusted lengths before integrity check, and this issue also affects Java LTS builds before 2.73.12. Affected products: Bouncy Castle Java libraries for keystores; root cause is allocation using untrusted lengths prior t...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/03 12:38 a.m.55 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 12:38 a.m.9 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 12:38 a.m.9 views

EUVD-2026-52021

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/03 12:38 a.m.10 views

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/08/03 12:38 a.m.12 views

CVE-2026-12185

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0
OSV
OSV
added 2026/08/03 12:38 a.m.7 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.24 views

PT-2026-67011

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/01 11:16 a.m.7 views

UBUNTU-CVE-2026-18536

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entropy::RawSource::RandomOrg integrity check trivially matches...

7.5CVSS5.5AI score0.00161EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/28 10:00 a.m.6 views

UBUNTU-CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

6.5CVSS5.4AI score0.00405EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/27 7:16 a.m.22 views

CVE-2026-13390

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

5.3CVSS0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/27 6:00 a.m.13 views

EUVD-2026-49071

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

5.3CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/27 6:00 a.m.43 views

CVE-2026-13390 The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

0.00182EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/07/22 12:01 a.m.11 views

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due to improper validation of the contenttype field in TLS 1.3 encrypted records. An attacker can cause undetectable data loss or request/response desynchronization by selectively dropping...

8.3CVSS5.9AI score0.00186EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 5:17 p.m.14 views

CVE-2026-54496

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...

9.3CVSS0.0021EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/17 3:16 p.m.18 views

CVE-2026-12705

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS0.00098EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/17 2:30 p.m.12 views

EUVD-2026-45179

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS5.2AI score0.00098EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/17 2:30 p.m.8 views

CVE-2026-12705

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS5.3AI score0.00098EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/17 12:00 a.m.20 views

PT-2026-60766

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS5.2AI score0.00098EPSS
SaveExploits0References1
Rows per page
Query Builder